Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
File:                     coYn-VAmUUtCZUBY9J7rm3xI8CA.mft (raw, json)
Hash identifier:          5tcVZXfqEc5kw2LKIcKPJjRBClCdSFe6m2+sYXK0mMA=
Subject key identifier:   EA:92:2D:31:2F:E7:48:D6:B9:44:93:07:DD:BA:BC:0E:8E:9A:EC:4C
Authority key identifier: 72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20
Certificate issuer:       /CN=728627f95026514b42654058f49eeb9b7c48f020
Certificate serial:       0196BCDB719E9BD1FB9883274E39BDDBD7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
Manifest number:          024D
Signing time:             Sun 11 May 2025 01:00:20 +0000
Manifest this update:     Sun 11 May 2025 01:00:20 +0000
Manifest next update:     Mon 12 May 2025 01:00:20 +0000
Files and hashes:         1: 4q5L0T8IzmyOi7UmyokrDZ0n7yo.roa (hash: rKsZoGXihCrThcqNeLgDUuHM1BM1DfS8QEjoysPba8A=)
                          2: GV_0uBo9U-qXTNCsZ-0ommJTyoU.roa (hash: opWXn12DJLh2jYPAXbqu6bXDVmWJk2qaChEIKh6x3kw=)
                          3: coYn-VAmUUtCZUBY9J7rm3xI8CA.crl (hash: G6lVjPuVZjUCBQh/SPqfvqoTL0yiqjM/oMyOn508tfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:71:9e:9b:d1:fb:98:83:27:4e:39:bd:db:d7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728627f95026514b42654058f49eeb9b7c48f020
        Validity
            Not Before: May 11 01:00:20 2025 GMT
            Not After : May 12 01:00:20 2025 GMT
        Subject: CN=ea922d312fe748d6b9449307ddbabc0e8e9aec4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:1b:eb:68:fe:eb:80:39:79:2d:59:6d:ee:
                    7c:4e:d0:8f:09:17:d3:f2:24:9c:f4:31:39:7a:a3:
                    89:fa:18:6f:22:c3:03:34:1c:cd:71:fd:48:8c:d2:
                    0b:95:54:a3:79:c7:32:8b:7a:66:46:0c:7d:60:71:
                    b6:01:ff:40:d7:bc:e5:70:92:50:4c:a9:c2:50:3d:
                    a9:9e:8d:94:20:0a:a7:24:e8:bf:b9:54:be:2b:52:
                    2f:b8:d9:38:30:0a:1a:56:c6:c0:c2:04:86:fd:16:
                    cd:4e:bf:b7:bd:75:de:e5:93:9e:17:1e:1d:79:1f:
                    ed:40:fd:49:13:9e:3c:f4:f7:92:ab:f3:5e:85:c6:
                    eb:a8:d7:02:89:3e:ac:61:3c:c5:4e:21:7c:4a:60:
                    34:f3:9d:48:f9:aa:0a:f8:b0:82:91:98:ec:11:98:
                    20:8f:b2:0f:ac:de:e9:9e:6a:24:06:54:66:f9:08:
                    82:1e:9f:16:7f:53:5b:79:f1:c5:f5:29:f8:64:ba:
                    c2:78:24:85:10:32:a1:17:e3:f7:df:b9:d8:d7:76:
                    12:59:c2:f6:65:25:91:98:db:dd:0a:ee:53:66:35:
                    68:45:00:a1:8b:02:35:5d:fc:5a:d2:c2:82:3d:fd:
                    4e:c6:7a:d4:68:e1:07:bd:12:73:62:df:73:c4:3c:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:2D:31:2F:E7:48:D6:B9:44:93:07:DD:BA:BC:0E:8E:9A:EC:4C
            X509v3 Authority Key Identifier:
                keyid:72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:53:15:cc:7d:8d:0f:e2:85:3d:6a:2c:8e:a3:50:3f:9e:8d:
         b8:96:c9:92:10:51:a1:a8:b6:86:59:99:37:87:b4:ad:20:c1:
         da:26:dc:55:69:41:b2:df:8c:da:14:ab:b1:a1:eb:43:d3:f6:
         1e:5e:ec:d4:db:00:ab:2d:af:0f:94:bc:d6:c1:91:d3:63:0b:
         36:ff:91:89:3b:06:d7:14:f4:89:5a:24:75:69:b9:72:e3:77:
         c4:98:96:c0:e1:dc:aa:eb:05:b9:8b:c8:e1:aa:01:69:c0:f6:
         91:a2:b0:0c:c1:79:40:a4:49:31:5a:8c:7e:90:f2:92:21:74:
         89:3c:cf:61:69:b3:4b:c7:4a:0f:f4:9d:24:f7:7e:d2:34:1e:
         3a:ea:b7:89:d9:c2:08:00:65:b2:32:2b:22:4a:36:98:6c:0a:
         5c:47:1a:c7:4a:06:aa:0a:ae:3a:d8:38:6b:7e:fc:c6:8c:2e:
         bd:3f:a4:95:8a:ba:8f:0b:0e:2d:8e:d9:6b:af:cf:e6:74:79:
         94:f7:83:2b:65:bb:de:36:39:30:9d:55:49:10:7a:08:b6:bf:
         0b:32:6d:88:76:f7:5d:80:1c:14:bf:ce:92:e5:10:e2:5a:18:
         d7:2a:7a:92:22:09:9f:8b:78:72:51:9a:88:2f:35:f1:81:3b:
         31:f1:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:37:32 2025 by rpki-client